From bcd8519c70ecd9ebbc180920f2cf97b267d1f440 Mon Sep 17 00:00:00 2001 From: Cristy Date: Wed, 25 Mar 2026 19:54:25 -0400 Subject: [PATCH] https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-26qp-ffjh-2x4v --- MagickCore/effect.c | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) Index: ImageMagick-7.1.1-21/MagickCore/effect.c =================================================================== --- ImageMagick-7.1.1-21.orig/MagickCore/effect.c +++ ImageMagick-7.1.1-21/MagickCore/effect.c @@ -1371,7 +1371,13 @@ MagickExport Image *DespeckleImage(const /* Allocate image buffer. */ - length=(size_t) ((image->columns+2)*(image->rows+2)); + if ((image->columns > (MAGICK_SIZE_MAX-2)) || + (image->rows > (MAGICK_SIZE_MAX-2))) + { + despeckle_image=DestroyImage(despeckle_image); + ThrowImageException(ResourceLimitError,"MemoryAllocationFailed"); + } + length=(image->columns+2)*(image->rows+2); pixel_info=AcquireVirtualMemory(length,sizeof(*pixels)); buffer_info=AcquireVirtualMemory(length,sizeof(*buffer)); if ((pixel_info == (MemoryInfo *) NULL) ||